[DOCS] Enterprise authentication docs omit the login surfaces enforced by `forceLoginMethod`

Documentation Type

Missing documentation (feature not documented)

Documentation Location

https://code.claude.com/docs/en/authentication

Section/Topic

“Restrict login to your organization” and the forceLoginMethod managed-setting behavior.

Current Documentation

The authentication guide currently says:

“To require that developer sessions authenticate into a specific Anthropic organization, set forceLoginMethod and forceLoginOrgUUID in managed settings.”

It explains the effect on developer sessions and environment credentials, but does not enumerate the VS Code extension, Agent SDK, setup-token, or install-github-app login surfaces.

What's Wrong or Missing?

Claude Code 2.1.212 extends Enterprise forceLoginMethod enforcement to the VS Code extension, SDK, setup-token, and install-github-app login flows rather than only the terminal login flow. The current documentation does not tell administrators that the setting applies to these additional entry points.

An administrator can therefore configure the policy while having an incomplete understanding of which developer and automation login paths will be rejected or redirected.

Suggested Improvement

Add a “Surfaces covered” subsection or table listing terminal, VS Code extension, Agent SDK, setup-token, and install-github-app login flows. For each, state whether forceLoginMethod enforces the selected method, what users see when the policy conflicts with an attempted flow, and whether the setting is read from device-managed or server-managed settings.

Cross-link the same behavior from the SDK and VS Code authentication sections so the surface-specific documentation does not contradict the administrator reference.

Impact

Medium - Makes feature difficult to understand

Additional Context

Affected Pages:

| Page | Context |
|------|---------|
| https://code.claude.com/docs/en/authentication | Enterprise login policy and managed settings |
| https://code.claude.com/docs/en/settings | forceLoginMethod configuration reference |
| https://code.claude.com/docs/en/agent-sdk/overview | SDK authentication surface |
| https://code.claude.com/docs/en/vs-code | VS Code extension authentication surface |

Total scope: 4 pages should agree on the policy's covered login surfaces.

The expanded enforcement was released in Claude Code 2.1.212; the release notes are listed at https://code.claude.com/docs/en/changelog.